OpenThreadToken, StartTraceW, ControlTraceW, EnableTrace, QueryAllTracesW, RegQueryValueExW, RegOpenKeyExW, GetTokenInformation, GetLengthSid, AllocateAndInitializeSid, FreeSid, CopySid, CheckTokenMembership, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, TraceEvent, RegCloseKey, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, GetNamedSecurityInfoW, GetSecurityDescriptorControl, GetSecurityDescriptorLength, MakeSelfRelativeSD, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, GetAce, GetAclInformation, AddAce, InitializeAcl, EqualSid, IsValidSid, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSidSubAuthorityCount, DuplicateTokenEx, GetSidSubAuthority, OpenSCManagerW, ConvertStringSidToSidW, OpenServiceW, ChangeServiceConfigW, ControlService, QueryServiceStatus, PrivilegeCheck, InitiateSystemShutdownExW, CloseServiceHandle, LookupPrivilegeNameW, CreateProcessAsUserW, RegDeleteValueW, RegDeleteKeyW, RegSetValueExW, RegCreateKeyExW, SetNamedSecurityInfoW

ImageList_LoadImageW, ImageList_Destroy, ImageList_Create, ImageList_ReplaceIcon, InitCommonControlsEx, ImageList_GetIconSize

CommDlgExtendedError, PrintDlgW

CertVerifyCertificateChainPolicy

SetViewportOrgEx, SetWindowOrgEx, SetGraphicsMode, RestoreDC, CreatePatternBrush, DPtoLP, ModifyWorldTransform, SaveDC, ExtTextOutW, CreateDIBSection, GetObjectW, SetLayout, SelectObject, CreateBitmap, GetDeviceCaps, CreateCompatibleDC, SetTextColor, SetBkMode, PatBlt, GetTextExtentPoint32W, GetStockObject, GetObjectA, CreateSolidBrush, GetLayout, GetPixel, SetBkColor, GetTextMetricsW, DeleteDC, DeleteObject, CreateFontIndirectW, BitBlt, EndDoc, AbortDoc, StartDocW, EndPage, StartPage, CreateCompatibleBitmap

GdipDrawImageRect, GdipSetStringFormatHotkeyPrefix, GdipSetStringFormatLineAlign, GdipSetStringFormatAlign, GdipStringFormatGetGenericDefault, GdipCloneStringFormat, GdipDrawLine, GdipLoadImageFromStreamICM, GdipLoadImageFromStream, GdipDeleteStringFormat, GdipCreateStringFormat, GdipDrawLineI, GdipDrawPath, GdipFillPath, GdipDeletePath, GdipCreatePath, GdipDrawImageRectI, GdipDrawString, GdipCloneBitmapAreaI, GdipCreateFontFromLogfontA, GdipCreateFontFromDC, GdipMeasureString, GdipFillRectangle, GdipReleaseDC, GdipGetDC, GdipAddPathArcI, GdipAddPathLineI, GdipClosePathFigure, GdipCreateLineBrushFromRect, GdipCreateHICONFromBitmap, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipGetImagePixelFormat, GdipDeleteFont, GdipCloneBrush, GdipFillRectangleI, GdipDrawRectangleI, GdipCreateLineBrushFromRectI, GdiplusShutdown, GdipFree, GdipAlloc, GdipDeleteGraphics, GdipDisposeImage, GdipGetImageWidth, GdipGetImageHeight, GdipCreateBitmapFromHICON, GdiplusStartup, GdipCreateFromHDC, GdipSetSmoothingMode, GdipDrawImageRectRectI, GdipCloneImage, GdipDeleteBrush, GdipCreatePen1, GdipDeletePen, GdipCreateSolidFill, GdipSetTextRenderingHint, GdipImageRotateFlip

HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, LoadLibraryA, VirtualFree, VirtualAlloc, UnmapViewOfFile, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, SearchPathW, WaitForMultipleObjects, InterlockedExchange, Sleep, InterlockedCompareExchange, OutputDebugStringA, RtlUnwind, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, GetVersion, RaiseException, CloseHandle, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, GetLastError, FlushInstructionCache, LocalFree, LocalAlloc, FreeLibrary, GetProcAddress, LoadLibraryW, SetEvent, CreateEventW, ResetEvent, CreateMutexW, SetLastError, InterlockedIncrement, InterlockedDecrement, GetVersionExW, FreeConsole, GetConsoleDisplayMode, AttachConsole, lstrcmpW, GetModuleHandleW, GetDateFormatW, GetModuleFileNameW, GetTimeFormatW, FileTimeToLocalFileTime, GetLocaleInfoW, GetLocalTime, FileTimeToSystemTime, CreateFileW, ReadFile, GetDriveTypeW, GetFileAttributesW, MulDiv, GetLogicalDriveStringsW, FindClose, FindFirstFileW, FindNextFileW, ExitProcess, CompareFileTime, GetExitCodeProcess, SwitchToThread, WaitForSingleObject, FormatMessageW, DeleteFileW, MoveFileW, GetTempPathW, LoadLibraryExW, GetSystemDefaultLangID, lstrlenW, TryEnterCriticalSection, GetFileSizeEx, GetSystemDefaultLCID, CreateProcessW, MoveFileExW, WriteFile, GetTempFileNameW, InitializeCriticalSectionAndSpinCount, CreateThread, LCMapStringW, CreateFileMappingW, MapViewOfFile, ExpandEnvironmentStringsW, GetCurrentThread, SystemTimeToFileTime, WideCharToMultiByte, MultiByteToWideChar, SetErrorMode, GetVersionExA, GetCommandLineW, VerifyVersionInfoW, GetFileSize, GetLongPathNameW, GetExitCodeThread, GetPrivateProfileStringW, FreeResource, WritePrivateProfileStringW, ProcessIdToSessionId, GlobalFindAtomW, HeapSetInformation, RemoveDirectoryW, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, GetDiskFreeSpaceExW, GetWindowsDirectoryW, IsWow64Process, ReleaseMutex, CopyFileW, GlobalFree, GlobalAlloc, GetPrivateProfileIntW, InterlockedPopEntrySList, IsProcessorFeaturePresent, InterlockedPushEntrySList, OpenProcess, GetSystemDirectoryW, CreateDirectoryW, GetNativeSystemInfo

MpConfigRegisterForNotifications, MpThreatQuery, MpSampleQuery, MpSampleSubmit, MpThreatEnumerate, MpThreatOpen, MpElevateCleanHandle, MpElevationHandleAcquire, MpCleanOpen, MpCleanStart, MpUpdateStartEx, MpScanStart, MpOfflineScanStatusQuery, MpManagerStatusQueryEx, MpNotificationRegister, MpUpdateControl, MpManagerVersionQuery, MpConfigIteratorEnum, MpConfigIteratorOpen, MpTelemetryUpdateUserConsent, MpConfigUnregisterNotifications, MpConfigIteratorClose, MpConfigGetValueAlloc, MpProductGenuineCheck, MpManagerEnable, MpFreeMemory, MpCreateComInstance, MpConfigClose, MpConfigGetValue, MpConfigOpen, MpHandleClose, MpForcedReboot, MpTelemetryIncrementDWORD, MpTelemetrySetDWORD, MpClientUtilExportFunctions, MpErrorMessageFormat, MpManagerOpen, MpUtilsExportFunctions, MpAllocMemory, MpTelemetryIsOptIn, MpConfigUninitialize, MpConfigInitialize, MpTelemetryUninitialize, MpTelemetryUpload, MpTelemetryInitialize

DllMain

CoInitializeEx, CoCreateGuid, StringFromGUID2, CoCreateInstance, CoUninitialize

GetModuleFileNameExW

ShellExecuteExW, SHGetFileInfoW, Shell_NotifyIconW, SHGetFolderPathW, SHGetSpecialFolderLocation, SHGetPathFromIDListW, CommandLineToArgvW

PathFileExistsW, StrCmpNIW, StrStrIW, PathAppendW, PathRemoveFileSpecW, StrCmpNW, StrCmpW, PathIsDirectoryW, PathCombineW, PathIsRelativeW, PathFindFileNameW, StrCmpIW, PathMatchSpecW, PathIsRootW

GetMessageW, LoadAcceleratorsW, GetDesktopWindow, FindWindowExW, AllowSetForegroundWindow, MessageBoxW, EnableWindow, SetWindowTextW, LoadImageW, GetLastActivePopup, ShowCursor, SetCursor, GetWindowTextW, GetWindowTextLengthW, PostQuitMessage, SetFocus, GetFocus, GetWindowLongW, IsWindowEnabled, GetNextDlgTabItem, IsDialogMessageW, GetClassNameW, GetKeyState, CallWindowProcW, MoveWindow, SetWindowPos, GetWindowRect, GetClientRect, GetWindowPlacement, ScreenToClient, BeginPaint, EndPaint, GetDC, ReleaseDC, InvalidateRect, ShowWindow, IsWindowVisible, LockWindowUpdate, SetTimer, KillTimer, MapWindowPoints, SystemParametersInfoW, GetWindow, GetParent, IsRectEmpty, GetSysColor, PeekMessageW, FindWindowW, WindowFromPoint, GetSystemMetrics, GetWindowThreadProcessId, GetForegroundWindow, DefWindowProcW, DestroyMenu, FlashWindowEx, TrackMouseEvent, TranslateAcceleratorW, RegisterWindowMessageW, TrackPopupMenu, GetCursorPos, EnableMenuItem, AppendMenuW, CreatePopupMenu, ReplyMessage, MessageBeep, GetDoubleClickTime, GetAncestor, DrawFocusRect, FillRect, InflateRect, EndDialog, GetDlgItem, DrawTextW, GetDlgCtrlID, GetSubMenu, LoadMenuW, DeleteMenu, RedrawWindow, MessageBoxIndirectW, GetActiveWindow, GetSysColorBrush, GetSystemMenu, GetMenuState, PtInRect, EqualRect, LoadIconW, SetMenuItemInfoW, SetMenuInfo, IsMenu, OffsetRect, ShowCaret, HideCaret, GetWindowDC, SetDlgItemTextW, SetRectEmpty, SetCapture, ReleaseCapture, DrawEdge, GetMessagePos, GetCapture, UpdateWindow, GetScrollPos, ScrollWindow, ScrollWindowEx, SetScrollPos, GetScrollInfo, SetScrollInfo, GetWindowInfo, CreateDialogIndirectParamW, SetActiveWindow, TranslateMessage, DispatchMessageW, SendMessageW, PostMessageW, CreateWindowExW, RegisterClassExW, DestroyIcon, DestroyWindow, LoadCursorW, GetClassInfoExW, IsWindow, SetWindowLongW, DialogBoxIndirectParamW, UnregisterClassA, ClientToScreen, ExitWindowsEx, SetForegroundWindow, GetIconInfo, DrawIconEx, CreateIconIndirect, ModifyMenuW, GetMenuStringW, GetMenuItemID, GetMenuItemInfoW, GetMenuItemCount, CheckDlgButton, AdjustWindowRect, PostThreadMessageW, LoadStringW, CreateDialogParamW, IsDlgButtonChecked

UnloadUserProfile, DestroyEnvironmentBlock, CreateEnvironmentBlock

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

InternetGetConnectedState

WinVerifyTrust, WTHelperProvDataFromStateData, WTHelperGetProvSignerFromChain, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminAcquireContext, CryptCATAdminEnumCatalogFromHash, CryptCATCatalogInfoFromContext, CryptCATAdminReleaseCatalogContext, CryptCATAdminReleaseContext

WTSQuerySessionInformationW, WTSEnumerateSessionsW, WTSFreeMemory, WTSQueryUserToken